www.rutaspozoalcon.es

Issued by R3

About this certificate

This digital certificate with serial number 04:e0:a2:30:13:4a:69:9e:3c:69:e2:bc:b1:e0:db:a5:1a:53 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.rutaspozoalcon.es

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e0:a2:30:13:4a:69:9e:3c:69:e2:bc:b1:e0:db:a5:1a:53
Serial Number (int): 424887978474158922162471370892027403508307
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 21:45:c2:3b:ac:4c:2c:eb:6b:4f:b5:e7:c9:e2:c3:6a:d1:bd:b3:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b0:39:b4:b4:01:05:00:f4:ce:ac:47:ba:b4:3f:cb:d8:95:de:3c:23
Fingerprint (sha256): 2d:c6:05:5d:b9:89:4d:69:bc:d3:86:22:9f:d0:4e:11:01:eb:c8:d8:2f:3b:a6:b2:75:42:86:69:fb:47:ef:8a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.rutaspozoalcon.es

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rutaspozoalcon.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.asl.kaiprince.xyz
admin.dev.mou.fit
androidtv.blackdove.io
app.bushidoco.de
app.dantaxi.dk
app.dev.spext.co
app.duer.pl
app.firebase-dynamic-links.pp.ua
app.o21.nu
app.studyu.health
applink.fandangoapp.co.uk
auth-test.budget-insight.com
auth.waffle.city
basf.dev.salesinmotion.evtit.com
beta.busca-bar.com
bkkbisa.id
corporativodefranquicias.com
debosz.com.pl
demo-react-movies.aptech.io
demo-react-shop.aptech.io
docguia.com
drsmart.in
eship.code.berlin
events.flavorte.com
firebreak.florentcaspar.com
forms.creatinium.com
gaudtech.com
gift.seven.app
goal.o21.nu
health.uleos.com
hoodmap.kaeyosthaeron.com
housevilis.lt
jarborist.pl
korabruk.pl
lc-equipments.phuket.psu.ac.th
lending.beamswap.io
link.alggrands.com
link.kok-heijkamp.nl
link.musickool.ao
links.lua-dev.idap.pro
login.aepssevakendra.com
mlg-it.com
mobile.payday.works
mobileapp.hays.com
modpas.com
nagelperfekt.com.ar
nmerken.com
pikyard.in
playnscore.com
pmgsystems.com.br
portal.collaborative.fm
pracy.org
prodeveloper.nl
qr.nossooculos.com.br
redirect.agenciahunter.com.br
sandwellsoftwaresolutions.com
shittycoder.com
swods.io
tapasdhar.com
theobento.me
tienda.staging.plasmartcba.com
toptrends.theantapp.com
translator.stage.xn--hier-jra.com
translator.xn--hier-jra.com
tst-kamadojoe.elrego.com
uat-insight.collaborative.fm
uat-portal.collaborative.fm
ug-armar.pl
underwrites.tips.trade
uw.tips.trade
waplo.ynriver.com
web.bikescycle.com
web.que-pinta.com
widget.nitrobots.ai
www.acetabulum.cz
www.apsauga.tech
www.canererdogan.tech
www.debosz.com.pl
www.electro-control.ch
www.korabruk.pl
www.ntqk.me
www.powrmonit.in
www.reviveuuniverseth.com
www.rutaspozoalcon.es
www.sandwellsoftwaresolutions.com
www.xn--defektabilarkpes-ywb.se
www.xn--dengladehvel-3jb.no
www.xn--hnskom-bua.com
www.xn--krgel-friseur-team-mtb.de
www.xn--nettipyr-7za2p.fi
www.xn--skrplabbet-s5a.se
xn----7sbabgh8axfivlejh6i2b6a9b.xn--p1ai
xn----ftbeb0adfohbl9k.xn--p1ai
xn--0xa.demo.pwnlogs.dev
xn--80afikhohhq8m.xn--p1acf
xn--gonchecken-dcb.se
xn--h49a69zb7dtzkvrdxxn.com
xn--lckxdven68lsenehu.com
xn--mq8h.pokymon.eu.org
xn--nettipyr-7za2p.fi

Other certificates including the domain name rutaspozoalcon.es

(limited to 100 certificates)
www.danieldoral.xyz
www.rutaspozoalcon.es
sketchbook.timeblur.io
www.mototaxigo.com
prodeveloper.nl
planthis-auth.pl
xn--nettipyr-7za2p.fi
app.duer.pl
xn--ls8h.multiverse.ai

Certificate

The complete raw certificate details for www.rutaspozoalcon.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqts0yeLgDWLpXG8sRB2i
Q8Ij3zzELdn6D6ExCQIkUHGCv6Huwl9Q8PIIXsiZyat+iSQvQhBZ9wSHYYuYFWvX
Dt1Kxj1ANOKFWDkWWviC9zWdhdaKPdlYztCJecN+nArrGPn6JHopjPGrpoCyNq5O
HXNynFGBtfv0aHfPm371Y/eUraUOdEBDMlX3toOcyhILlZnjQh6GldEV9NsGdz5A
PQ/Fzwnwjvpt4aPJHVPaCF9AGkA0l4YO+qq77J8tvq+d/DXLsdDzu/zHhyZrFyID
a8C5x+cwh8P2ohtDc5YvLg4JhnGypIjY/vxM46ZOlhq1BdEIkF49LQbJWWD5XlVU
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424887978474158922162471370892027403508307
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 01:28:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 01:28:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rutaspozoalcon.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21568606452922690464864403781649019280961512127316632854929112643012038414038224595040510751632868531122477333584876446165837603625890439078745414170116471873349413242052735976324415418248848035355652012025457321934294096855115246667661605884744928569294794130324006629253935453396506329344254897503334365392763771226275441384004031569771088940838972006575176183041851114277237278160067752102229966712139703402478119486244641289618734827667934325278517137296275359279364379199554779343298633087796514429888342277602488481638322208821470427441211758426417189710073899496974886089506309537113040742478990983704381576277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2145c23bac4c2ceb6b4fb5e7c9e2c36ad1bdb3c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.asl.kaiprince.xyz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dev.mou.fit'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'androidtv.blackdove.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.bushidoco.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dantaxi.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.dev.spext.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.duer.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.firebase-dynamic-links.pp.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.o21.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.studyu.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applink.fandangoapp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-test.budget-insight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.waffle.city'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf.dev.salesinmotion.evtit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.busca-bar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bkkbisa.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporativodefranquicias.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debosz.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-react-movies.aptech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-react-shop.aptech.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docguia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drsmart.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eship.code.berlin'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.flavorte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firebreak.florentcaspar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.creatinium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaudtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gift.seven.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goal.o21.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.uleos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoodmap.kaeyosthaeron.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'housevilis.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarborist.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'korabruk.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lc-equipments.phuket.psu.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lending.beamswap.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.alggrands.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.kok-heijkamp.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link.musickool.ao'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'links.lua-dev.idap.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.aepssevakendra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlg-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.payday.works'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapp.hays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modpas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagelperfekt.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmerken.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pikyard.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playnscore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmgsystems.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.collaborative.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pracy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodeveloper.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.nossooculos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.agenciahunter.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandwellsoftwaresolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shittycoder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swods.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapasdhar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theobento.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tienda.staging.plasmartcba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toptrends.theantapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translator.stage.xn--hier-jra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translator.xn--hier-jra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-kamadojoe.elrego.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-insight.collaborative.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-portal.collaborative.fm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ug-armar.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'underwrites.tips.trade'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uw.tips.trade'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waplo.ynriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.bikescycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.que-pinta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.nitrobots.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acetabulum.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apsauga.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canererdogan.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.debosz.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.electro-control.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.korabruk.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntqk.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powrmonit.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reviveuuniverseth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rutaspozoalcon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandwellsoftwaresolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--defektabilarkpes-ywb.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--dengladehvel-3jb.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--hnskom-bua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--krgel-friseur-team-mtb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--nettipyr-7za2p.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--skrplabbet-s5a.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn----7sbabgh8axfivlejh6i2b6a9b.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn----ftbeb0adfohbl9k.xn--p1ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--0xa.demo.pwnlogs.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--80afikhohhq8m.xn--p1acf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--gonchecken-dcb.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--h49a69zb7dtzkvrdxxn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--lckxdven68lsenehu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--mq8h.pokymon.eu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--nettipyr-7za2p.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bc15c01c700000403004830460221009f1b455c3544f999555aa381c58ccda80711ab3187a56d55d0f7f20afcc89a130221009fa630344903b0adde1ab7a6a97aca6362639b74f9897aa75e63f63d84741468007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bc15c01cd0000040300473045022100bd0a66a22eda3e8f6489626fd7863db75fc7375ed643b8b1b0627c2b4ca0949802207986bbd38f96dab0727336c1357c177636832af0740c2f6249f89e007de9e13d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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